Which activity is most closely related to security standards?

A. allowing unlimited anonymous access B. documented security requirements or accepted practices C. disabling audit logs D. removing all documentation